Vulnerabilities (CVE)

Filtered by vendor Datalex Subscribe
Filtered by product Airline Booking Software
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-2858 1 Datalex 1 Airline Booking Software 2024-02-04 7.5 HIGH N/A
Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.